system and method for determining crackability of a password in real time. The system and method include and involve a server system that serves a software package, and a client system that is coupled to the server system. The client system is configured to receive the software package. The software package includes a password entry facility permitting a user to enter a password candidate string one character at a time, and a strength determination facility configured to communicate with the password entry facility and to determine the crackability of the password candidate in real time repeatedly as each character of the password candidate string is entered into the password entry facility.
|
1. A method of evaluating a potential password comprising:
accessing a potential password for a user having multiple characters;
identifying, from among at least a numeric character type, a lowercase letter character type, an uppercase letter character type, and a nonalphanumeric character type, character types that correspond to the multiple characters included in the potential password;
detecting variations in the identified character types that correspond to the multiple characters included in the potential password by:
detecting whether the potential password includes at least one numeric character,
detecting whether the potential password includes at least one lowercase letter character,
detecting whether the potential password includes at least one uppercase letter character, and
detecting whether the potential password includes at least one nonalphanumeric character;
determining a total number of the multiple characters included in the potential password;
determining a number of repeated characters included in the multiple characters included in the potential password;
computing a measure that reflects the number of repeated characters relative to the total number of the multiple characters included in the potential password;
computing, by at least one computer and based on the detected variations in the identified character types and the computed measure that reflects the number of repeated characters relative to the total number of the multiple characters included in the potential password, a numeric value that corresponds to an amount of time estimated for cracking the potential password by:
modifying the numeric value in a manner that increases an amount of time estimated for cracking the potential password conditioned on detecting that the potential password includes at least one numeric character,
modifying the numeric value in a manner that increases an amount of time estimated for cracking the potential password conditioned on detecting that the potential password includes at least one lowercase letter character,
modifying the numeric value in a manner that increases an amount of time estimated for cracking the potential password conditioned on detecting that the potential password includes at least one uppercase letter character,
modifying the numeric value in a manner that increases an amount of time estimated for cracking the potential password conditioned on detecting that the potential password includes at least one nonalphanumeric character, and
modifying the numeric value as a function of the computed measure that reflects the number of repeated characters relative to the total number of the multiple characters included in the potential password; and
making perceivable information as an indication of strength for the potential password based on the computed numeric value.
10. At least one storage device having stored thereon executable instructions that when executed by at least one computer cause the at least one computer to perform operations comprising:
accessing a potential password for a user having multiple characters;
identifying, from among at least a numeric character type, a lowercase letter character type, an uppercase letter character type, and a nonalphanumeric character type, character types that correspond to the multiple characters included in the potential password;
detecting variations in the identified character types that correspond to the multiple characters included in the potential password by:
detecting whether the potential password includes at least one numeric character,
detecting whether the potential password includes at least one lowercase letter character,
detecting whether the potential password includes at least one uppercase letter character, and
detecting whether the potential password includes at least one nonalphanumeric character;
determining a total number of the multiple characters included in the potential password;
determining a number of repeated characters included in the multiple characters included in the potential password;
computing a measure that reflects the number of repeated characters relative to the total number of the multiple characters included in the potential password;
computing, based on the detected variations in the identified character types and the computed measure that reflects the number of repeated characters relative to the total number of the multiple characters included in the potential password, a numeric value that corresponds to an amount of time estimated for cracking the potential password by:
modifying the numeric value in a manner that increases an amount of time estimated for cracking the potential password conditioned on detecting that the potential password includes at least one numeric character,
modifying the numeric value in a manner that increases an amount of time estimated for cracking the potential password conditioned on detecting that the potential password includes at least one lowercase letter character,
modifying the numeric value in a manner that increases an amount of time estimated for cracking the potential password conditioned on detecting that the potential password includes at least one uppercase letter character,
modifying the numeric value in a manner that increases an amount of time estimated for cracking the potential password conditioned on detecting that the potential password includes at least one nonalphanumeric character, and
modifying the numeric value as a function of the computed measure that reflects the number of repeated characters relative to the total number of the multiple characters included in the potential password; and
making perceivable information as an indication of strength for the potential password based on the computed numeric value.
19. A data processing system comprising:
at least one processing unit; and
a data storage facility coupled to the at least one processing unit having executable instructions stored thereon which, when executed by the at least one processing unit, cause the at least one processing unit to perform operations comprising:
accessing a potential password for a user having multiple characters;
identifying, from among at least a numeric character type, a lowercase letter character type, an uppercase letter character type, and a nonalphanumeric character type, character types that correspond to the multiple characters included in the potential password;
detecting variations in the identified character types that correspond to the multiple characters included in the potential password by:
detecting whether the potential password includes at least one numeric character,
detecting whether the potential password includes at least one lowercase letter character,
detecting whether the potential password includes at least one uppercase letter character, and
detecting whether the potential password includes at least one nonalphanumeric character;
determining a total number of the multiple characters included in the potential password;
determining a number of repeated characters included in the multiple characters included in the potential password;
computing a measure that reflects the number of repeated characters relative to the total number of the multiple characters included in the potential password;
computing, based on the detected variations in the identified character types and the computed measure that reflects the number of repeated characters relative to the total number of the multiple characters included in the potential password, a numeric value that corresponds to an amount of time estimated for cracking the potential password by:
modifying the numeric value in a manner that increases an amount of time estimated for cracking the potential password conditioned on detecting that the potential password includes at least one numeric character,
modifying the numeric value in a manner that increases an amount of time estimated for cracking the potential password conditioned on detecting that the potential password includes at least one lowercase letter character,
modifying the numeric value in a manner that increases an amount of time estimated for cracking the potential password conditioned on detecting that the potential password includes at least one uppercase letter character,
modifying the numeric value in a manner that increases an amount of time estimated for cracking the potential password conditioned on detecting that the potential password includes at least one nonalphanumeric character, and
modifying the numeric value as a function of the computed measure that reflects the number of repeated characters relative to the total number of the multiple characters included in the potential password; and
making perceivable information as an indication of strength for the potential password based on the computed numeric value.
2. The method of
modifying the numeric value in a manner that increases an amount of time estimated for cracking the potential password conditioned on detecting that the potential password includes at least one numeric character comprises modifying the numeric value using a first weighting factor;
modifying the numeric value in a manner that increases an amount of time estimated for cracking the potential password conditioned on detecting that the potential password includes at least one lowercase letter character comprises modifying the numeric value using a second weighting factor that is greater than the first weighting factor;
modifying the numeric value in a manner that increases an amount of time estimated for cracking the potential password conditioned on detecting that the potential password includes at least one uppercase letter character comprises modifying the numeric value using the second weighting factor; and
modifying the numeric value in a manner that increases an amount of time estimated for cracking the potential password conditioned on detecting that the potential password includes at least one nonalphanumeric character comprises modifying the numeric value using a third weighting factor that is greater than the first weighting factor and the second weighting factor.
3. The method of
4. The method of
5. The method of
6. The method of
enabling the user to change the potential password;
receiving user input resulting in a modified potential password; and
updating the perceivable information to reflect an indication of strength of the modified potential password.
7. The method of
8. The method of
9. The method of
11. The at least one storage device of
modifying the numeric value in a manner that increases an amount of time estimated for cracking the potential password conditioned on detecting that the potential password includes at least one numeric character comprises modifying the numeric value using a first weighting factor;
modifying the numeric value in a manner that increases an amount of time estimated for cracking the potential password conditioned on detecting that the potential password includes at least one lowercase letter character comprises modifying the numeric value using a second weighting factor that is greater than the first weighting factor;
modifying the numeric value in a manner that increases an amount of time estimated for cracking the potential password conditioned on detecting that the potential password includes at least one uppercase letter character comprises modifying the numeric value using the second weighting factor; and
modifying the numeric value in a manner that increases an amount of time estimated for cracking the potential password conditioned on detecting that the potential password includes at least one nonalphanumeric character comprises modifying the numeric value using a third weighting factor that is greater than the first weighting factor and the second weighting factor.
12. The at least one storage device of
13. The at least one storage device of
14. The at least one storage device of
15. The at least one storage device of
enabling the user to change the potential password;
receiving user input resulting in a modified potential password; and
updating the perceivable information to reflect an indication of strength of the modified potential password.
16. The at least one storage device of
17. The at least one storage device of
18. The at least one storage device of
20. The system of
modifying the numeric value in a manner that increases an amount of time estimated for cracking the potential password conditioned on detecting that the potential password includes at least one numeric character comprises modifying the numeric value using a first weighting factor;
modifying the numeric value in a manner that increases an amount of time estimated for cracking the potential password conditioned on detecting that the potential password includes at least one lowercase letter character comprises modifying the numeric value using a second weighting factor that is greater than the first weighting factor;
modifying the numeric value in a manner that increases an amount of time estimated for cracking the potential password conditioned on detecting that the potential password includes at least one uppercase letter character comprises modifying the numeric value using the second weighting factor; and
modifying the numeric value in a manner that increases an amount of time estimated for cracking the potential password conditioned on detecting that the potential password includes at least one nonalphanumeric character comprises modifying the numeric value using a third weighting factor that is greater than the first weighting factor and the second weighting factor.
21. The system of
22. The system of
23. The system of
24. The system of
enabling the user to change the potential password;
receiving user input resulting in a modified potential password; and
updating the perceivable information to reflect an indication of strength of the modified potential password.
25. The system of
26. The system of
27. The system of
|
|||||||||||||||||||||||||||||
1. Field of the Invention
The present invention relates to systems and methods used to permit a user of a computing and data processing system to set a password that is used to limit access to the user's data stored within the computing and data processing system.
2. Description of the Related Art
User identification codes and passwords are well known. Our society uses passwords such as alpha numeric strings of characters (e.g., “COAT,” “9821,” “WAYCOOL4,” etc.) for many purposes such as to obtain cash from cash machines, to access computer and data processing system accounts (e.g., online accounts) where personal data is stored, and, generally, to provide a level of security to protect one's personal information from unwanted eyes.
Unfortunately, users of data processing and online systems often set passwords that are poor security guards. That is, users often pick passwords that are easy to “crack,” or be determined by others. When a password is easy to crack, a data thief may obtain access to systems and personal information, which can be wrongfully used. For example, some Internet and World Wide Web sites now permit users to pre-configure their online profiles to include credit card numbers and the like. If a user of such an online system were to select a password that is easily cracked, the user's credit card number could be stolen and wrongfully charged. In such cases, consumers and product and service providers suffer losses.
To address the problems associated with setting passwords, providers such as online providers have proposed various solutions. For example, some providers (e.g., WWW site operators, etc.) have addressed such problems administratively by implementing password establishment rules such as those associated with minimum length strings, upper and lower case character requirements, etc. Such solutions still do not prevent users from selecting and setting passwords containing strings of characters (alpha numeric strings) that may be easily cracked (e.g., the password “Usgovernment”). As such, rules based solutions do not allow a user to make a decision as to the relative strength of particular password candidate; instead, such rules based solutions require users to engage in brute force selection of passwords until one is selected that meets the particular rules in effect.
Another solution that has been proposed is to run a password cracking program against a submitted password candidate for a relatively short period of time to determine if the password can be easily cracked. Unfortunately, such programs are often time consuming to run, are subject to limited algorithms for determining “crackability” (i.e., a password's susceptibility to being determined by unwanted eyes) and are not run in real time. As such, users often must wait for a determination to be made prior to accessing a system (e.g., an online system, etc.).
Thus, there exists a need to provide new and improved systems and methods to solve the aforementioned problems associated with selecting and setting passwords such as those that may be used with online systems and services (e.g., WWW services, etc.). To be viable, such systems and methods must permit a user to select a password in real time and learn of its relative strength (e.g., its crackability) prior to actually setting the password.
The present invention solves the aforementioned problems associated with prior systems and methods used to facilitate user password/ID selection. Providers will benefit from the present invention by being able to offer services such as those provided by network sites (e.g., Internet and World Wide Web (WWW) sites) that permit users to set passwords and other similar IDs with knowledge about the security of such passwords. And, because the present invention permits password security to be evaluated and determined in real time, users will be better able to control and protect their privacy.
The present invention achieves its objectives to deliver the aforementioned benefits by providing new and improved systems and methods for determining crackability of a password in real time. Crackability refers to the ability of password to be determined or revealed using brute force techniques performed, for example, by a computer that repetitively and exhaustively checks each string combination as an attack against a subject password. Such systems and methods include and involve a server system that serves a software package, and a client system that is coupled to the server system. The client system is configured to receive the software package. The software package includes a password entry facility permitting a user to enter a password candidate string one character at a time, and a strength determination facility configured to communicate with the password entry facility and to determine the crackability of the password candidate in real time repeatedly as each character of the password candidate string is entered into the password entry facility.
The present invention is next described with reference to the drawing figures attached to this patent document.
The present invention is described in detail below with regard to the attached drawing figures, of which:
The present invention is now discussed with reference to the drawing figures that were briefly described above. Unless otherwise specified, like parts and processes are referred to with like reference numerals.
In the discussions that follow, the terms:
“Crackability” refers to a password's relative strength. That is, crackability is a measure of a password's ability to remain undetermined by unwanted parties. In the context of the present invention, crackability may be a predicted amount or measure of time (referred to herein as a “time-to-crack” parameter) for a password to be cracked or determined by unwanted eyes.
“Password” refers to any type of personal identifier that may be used to provide a system user with a verifiable security shield. Accordingly, in the discussions that follow, the use of the term “password” is intended to include all types of identifiers such as user IDs, passwords, security words, etc. There is no requirement that the present invention only apply to passwords as that term has been used in prior contexts.
“Brute force” refers to processes, which may be used to check combinations and permutations (such as all such combinations or permutations) of characters in a string, for example, against a particular password to determine if a match exists. When such a match occurs, a brute force process is said to produce a usable password and, in particular, one that may be used, for example, to obtain access (e.g., wrongful access, etc.) to a corresponding user's personal information and data. An estimated amount of time that such a brute force process may take to derive a valid password can be thought of as the aforementioned crackability or “time-to-crack” parameter or factor —i.e., a predicted measure or amount of time it would take to crack a particular password. In the context of the present invention, time-to-crack is predicted based on a factor of 40,000 attacks per second. That is, a password candidate such as “r*D8mYI^nch” would take over one (1) year to crack or determine if a data processing system were configured to automatically engage in a brute force cracking operation that permitted at least 40,000 attacks or password combination checks per second. Such a number of attacks are quite significant based on modern data processing systems.
The aforementioned terms may be pluralized in the discussions that follow. Such pluralized terms are not intended to change the underlying meanings presented above.
Referring now to
Once facilities 108 and 110 are properly executed within client system 106, for example, content received from server system 104 may be manifested in the context of a web site page view 112. Web site page view 112 may include a form mechanism or other data entry facility to permit a user to enter character sequences such as those used with passwords in accordance with the preferred embodiment of the present invention. More particularly, the present invention permits a user to enter any length character string as illustrated in web site page view 112 containing end number of characters in a password candidate string 114. More particularly, password candidate string 113 may include alphanumeric characters as well as symbols, which may be included within a character set, such as the ASCII character set. For example, password candidate string 113 may appear like or similar to “xB3$*-^Y”; such a string could take a relatively long time to crack.
Referring now to
The structures show in
Referring now to
Next, at step S3-3 a client system 106 requests content containing a software package from the network site (server system 104). Such network and WWW downloading will be immediately understood by those skilled in the art.
Next, at step S3-4, server system 104 serves the software package to the client system 106 and the client system processes and executes the same (e.g., performs Hyper-Text Markup Language (HTML) rendering and script processing, etc.).
Next, at step S3-5, the software package executes within client system 106 and a password entry facility such as password entry facility 108 permits a user to enter at least one character as part of a password candidate string.
Next, at step S3-6, a determination facility, such as determination facility 110 (
Next, at step S3-7, determination facility 110 computes crackability of the password candidate string (e.g., for the characters currently entered by the user) and presents the results of such evaluation to the user. The determination of crackability in accordance with the present invention is to determine a measure of time that a brute force attack technique would take to derive the password candidate string entered by the user.
According to a preferred embodiment of the present invention, password candidates may contain the upper and lower case characters, numbers, and symbols that make up a character set, such as the ASCII character set. As such, computing crackability and, in particular, the number of potential combinations that potentially could be evaluated by a brute force attack, contemplates an exponential number of combinations based on the unique number of characters that can comprise a particular password candidate. For example, if only lower case letters are entered by a user, combinations are computed based on a core number of 26—the number of possible characters that each character in a password candidate may be. If upper and lower case characters are used, then combinations are calculated based on a core number of 52, and so on, up to the total number of unique characters in a particular character set such as the ASCII character set.
Determination of crackability by determination facility 110 preferably is carried out as a program task that operates to produce a prediction as to the relative strength or difficulty associated with determining a user's valid password. Such a program task may be implemented using a computer and programming logic. For example, a JavaScript may be used to implement determination facility 110, which is intended to run as loadable software in a general purpose data processing system. Alternatively, since the present invention is widely applicable in many contexts that often utilize special purpose computers (e.g., ATM Banking Machines, etc.) determination facility 110 may be placed in a permanent storage device such as a read only memory device (ROM) or other similar non-volatile memory.
A preferred embodiment of determination facility 110 has been implemented using JavaScript and is intended to form part of a WWW site HTML page. Such a script also includes a data entry facility that may be used to implement facility 108 (password character/string entry facilities). Such a script is listed below by way of example within the HTML listing that follows to aid the reader in understanding the present invention. Those skilled in the art will immediately understand the listing that follows.
</html>
<meta http-equiv=“Content-Type” content=“text/html;
charset=iso−8859−1”>
<meta name=“Author” content=“Michael Mullany”>
<meta name=“GENERATOR” content=“Mozilla/4.5 [en] (WinNT; U)
[Netscape]”>
<title>PWSecurity</title>
<!-- javascript is copyright Netscape Communications Corp. 1999 © -->
<script>
function checkPW(form) {
repeat= new Array(255)
for(i= 0; i<255; i++) {repeat [i] =0;}
var isupper=0;
var islower=0;
var isnumer=0;
var isnonalphanumer=0;
var charrepeat=0;
var charnum;
var wordlength=form.PW1.value.length;
for(i=0; i<wordlength; i++)
{
charnum=form.PW1.value.charCodeAt (i);
if (repeat [charnum] ==0) {repeat [charnum] ++;}
else {charrepeat++;}
if(charnum>47 && charnum<58)
{
isnumer=1;
}else{
if(charnum>64 && charnum<91)
{
isupper=1;
}else{
if(charnum>96 && charnuma<123)
{
islower=1;
}else{isnonalphanumer=1};
}
}
}
var charspace=(10*isnumer+26*isupper+26*islower+33*
isnonalphanumer);
var wordspace=Math.pow(charspace, wordlength-charrepeat);
x=Math.min(1, ((Math.log(wordspace)/Math.log(2))/66));
this.document.layers[0].clip.top=126−(126*x);
}
</script>
</head>
<body>
<center><table BORDER COLS=1 WIDTM=“45%” BGCOLOR=
“#FFFFFF” >
<tr ALIGN=CENTER VALIGN=CENTER BGCOLOR=“#FFFFCC”>
<td><b><font face=“Verdana”><font size=+1>Choose a New Password
</font></font></b>
<br>
<table>
<tr VALIGN=TOP>
<td>
<center><table HEIGHT=“100%” >
<tr>
<td HEIGHT=“42”><b><font face=“Verdana”><font size=−1>Good
</font></font></b></td>
<td ROWSPAN=“3” HEIGHT=“100%”>
<table BORDER CELLSPACING=0 CELLPADDING=0 >
<tr>
<td><ilayer clip=“0,126,26,126”><img SRC=“pwstrength.JPG”
BORDER=0 height=126 width=25></ilayer></td>
</tr>
</table>
</td>
</tr>
<tr>
<td HEIGHT=“42”><b><font face=“Verdana”><font size=−1>
Better</font></font></b></td>
</tr>
<tr>
<td HEIGHT=“42”><b><font face=“Verdana”><font size=−1>
Weak</font></font></b></td>
</tr>
</table></center>
</td>
<td>
<center><table HEIGHT=“100%” >
<tr>
<td HEIGHT=“42”><form name=“myform”><font face=“Verdana”>
<font size=−1>Username</font></font></td>
<td><input type=“text” name=“UID” width=“30”></td>
</tr>
<tr>
<td HEIGHT=“42”><font face=“Verdana”><font size=−1>Password
</font></font></td>
<td><input type=“password” name=“PW1” width=“30” onKeyUp=
“checkPw(myform)”></td>
</tr>
<tr>
<td HEIGHT=“42”><font face=“Verdana”><font size=−1>
Password(again)</font></font></td>
<td><input type=“password” name=“PW2” width=“30”></form></td>
</tr>
</table></center>
</td>
</tr>
</table>
</td>
</tr>
<tr><td>
<BR>
<font face=“Verdana” size=−2>
This quality meter provides a measure of the total time to crack a
password.
<OL>
<LI>“Green” passwords take over a year to crack. (e.g. r*D8mY1{circumflex over ( )}nch)
<LI>“Red” passwords can be cracked in seconds. (e.g.monty)
</OL>
However, no matter what the meter says, if your password includes a word
that can be found in the dictionary of ANY language (even Pig Latin!)
OR includes the name of a person, place or thing in ANY language, then
your password can probably be cracked in minutes.
</font>
<BR>
</table></center>
<br>
</body>
</html>
Next, at step S3-8, a determination is made to whether the user intends to enter more characters into his password candidate string. If so, processing proceeds back to step S3-5 as discussed above to create a looping construct. If not, processing proceeds to step S3-9.
At step S3-9, the password candidate string maybe selected by the user for subsequent security purposes.
Next, processing ends at step S3-10.
Within
Thus, having fully described the present invention by way of example with reference to the attached drawing figures, it will be readily appreciated that many changes and modifications may be made to the invention and to any of the exemplary embodiments shown and/or described herein without departing from the spirit or scope of the invention which is defined in the appended claims.
| Patent | Priority | Assignee | Title |
| 10116653, | Aug 03 2016 | American Megatrends, Inc. | System and method for securing IPMI remote authenticated key-exchange protocol (RAKP) over hash cracks |
| 10275602, | Nov 17 2008 | HID GLOBAL CORPORATION | Method and apparatus for an end user identity protection suite |
| 10404683, | Oct 20 2011 | Amazon Technologies, Inc. | Strength-based password expiration |
| 10673841, | Aug 20 2007 | Ebay Inc. | System and methods for weak authentication data reinforcement |
| 11050739, | Aug 20 2007 | Ebay Inc. | System and methods for weak authentication data reinforcement |
| 11537706, | Dec 19 2014 | Amazon Technologies, Inc | Risk-based scheduling for credential rotation |
| 8108685, | Apr 23 2003 | Apple Inc. | Apparatus and method for indicating password quality and variety |
| 8238552, | Feb 13 2009 | OPEN TEXT HOLDINGS, INC | Password key derivation system and method |
| 8286000, | Dec 07 2007 | Apple Inc | Techniques for dynamic generation and management of password dictionaries |
| 8621642, | Nov 17 2008 | HID GLOBAL CORPORATION | Method and apparatus for an end user identity protection suite |
| 8689001, | Jun 29 2007 | Symantec Corporation | Method and system for protecting user identification information |
| 8826396, | Dec 12 2007 | WELLS FARGO BANK, N A | Password reset system |
| 8886950, | Dec 17 2008 | AT&T Intellectual Property I, L P | Apparatus, methods, and computer program products for facilitating secure password creation and management |
| 9009815, | Mar 15 2013 | International Business Machines Corporation | Increasing chosen password strength |
| 9032216, | Dec 07 2007 | Apple Inc. | Techniques for dynamic generation and management of password dictionaries |
| 9178876, | Oct 20 2011 | Amazon Technologies, Inc. | Strength-based password expiration |
| 9323919, | Dec 12 2007 | Wells Fargo Bank, N.A. | Password reset system |
| 9325715, | Mar 31 2015 | AO Kaspersky Lab | System and method for controlling access to personal user data |
| 9563767, | Aug 20 2007 | Ebay Inc. | System and methods for weak authentication data reinforcement |
| 9722997, | Apr 16 2014 | ADVANCED NEW TECHNOLOGIES CO , LTD | Method and apparatus of detecting weak password |
| 9864775, | Mar 26 2015 | International Business Machines Corporation | Query strength indicator |
| 9917830, | Aug 20 2007 | Ebay Inc. | System and methods for weak authentication data reinforcement |
| 9977893, | Dec 12 2007 | Wells Fargo Bank, N.A. | Password reset system |
| Patent | Priority | Assignee | Title |
| 5394471, | Sep 17 1993 | Verizon Patent and Licensing Inc | Method and system for proactive password validation |
| 5581700, | Aug 11 1995 | Dell U.S.A., L.P. | Hierarchical multiple password acceptance system |
| 5727156, | Apr 10 1996 | Xylon LLC | Internet-based automatic publishing system |
| 5790793, | Apr 04 1995 | Intellectual Ventures I LLC | Method and system to create, transmit, receive and process information, including an address to further information |
| 5799285, | Jul 19 1996 | Secure system for electronic selling | |
| 5870559, | Apr 11 1997 | HEWLETT-PACKARD DEVELOPMENT COMPANY, L P | Software system and associated methods for facilitating the analysis and management of web sites |
| 5870767, | Nov 22 1996 | International Business Machines Corporation | Method and system for rendering hyper-link information in a printable medium from a graphical user interface |
| 5893127, | Nov 18 1996 | Canon Kabushiki Kaisha | Generator for document with HTML tagged table having data elements which preserve layout relationships of information in bitmap image of original document |
| 5905248, | Sep 11 1990 | Metrologic Instruments | System and method for carrying out information-related transactions using web documents embodying transaction enabling applets automatically launched and executed in response to reading URL-encoded symbols pointing thereto |
| 5913215, | Apr 09 1996 | HANGER SOLUTIONS, LLC | Browse by prompted keyword phrases with an improved method for obtaining an initial document set |
| 6145086, | May 30 1997 | Oracle International Corporation | Security and password mechanisms in a database system |
| 6625567, | Nov 04 1999 | Bell and Howell, LLC | Automated methods and systems for analyzing data associated with an industrial process |
| 6643784, | Dec 14 1998 | RPX Corporation | Password generation method and system |
| 6687823, | May 05 1999 | Oracle America, Inc | Cryptographic authorization with prioritized and weighted authentication |
| Executed on | Assignor | Assignee | Conveyance | Frame | Reel | Doc |
| Mar 20 2000 | Netscape Communications Corporation | (assignment on the face of the patent) | / | |||
| Apr 06 2000 | MULLANY, MICHAEL | Netscape Communications Corporation | ASSIGNMENT OF ASSIGNORS INTEREST SEE DOCUMENT FOR DETAILS | 011151 | /0007 | |
| Dec 09 2009 | AOL Inc | BANK OF AMERICAN, N A AS COLLATERAL AGENT | SECURITY AGREEMENT | 023649 | /0061 | |
| Dec 09 2009 | YEDDA, INC | BANK OF AMERICAN, N A AS COLLATERAL AGENT | SECURITY AGREEMENT | 023649 | /0061 | |
| Dec 09 2009 | TRUVEO, INC | BANK OF AMERICAN, N A AS COLLATERAL AGENT | SECURITY AGREEMENT | 023649 | /0061 | |
| Dec 09 2009 | Tacoda LLC | BANK OF AMERICAN, N A AS COLLATERAL AGENT | SECURITY AGREEMENT | 023649 | /0061 | |
| Dec 09 2009 | SPHERE SOURCE, INC | BANK OF AMERICAN, N A AS COLLATERAL AGENT | SECURITY AGREEMENT | 023649 | /0061 | |
| Dec 09 2009 | Quigo Technologies LLC | BANK OF AMERICAN, N A AS COLLATERAL AGENT | SECURITY AGREEMENT | 023649 | /0061 | |
| Dec 09 2009 | Netscape Communications Corporation | BANK OF AMERICAN, N A AS COLLATERAL AGENT | SECURITY AGREEMENT | 023649 | /0061 | |
| Dec 09 2009 | MAPQUEST, INC | BANK OF AMERICAN, N A AS COLLATERAL AGENT | SECURITY AGREEMENT | 023649 | /0061 | |
| Dec 09 2009 | Lightningcast LLC | BANK OF AMERICAN, N A AS COLLATERAL AGENT | SECURITY AGREEMENT | 023649 | /0061 | |
| Dec 09 2009 | GOING, INC | BANK OF AMERICAN, N A AS COLLATERAL AGENT | SECURITY AGREEMENT | 023649 | /0061 | |
| Dec 09 2009 | ICQ LLC | BANK OF AMERICAN, N A AS COLLATERAL AGENT | SECURITY AGREEMENT | 023649 | /0061 | |
| Dec 09 2009 | BEBO, INC | BANK OF AMERICAN, N A AS COLLATERAL AGENT | SECURITY AGREEMENT | 023649 | /0061 | |
| Dec 09 2009 | AOL ADVERTISING INC | BANK OF AMERICAN, N A AS COLLATERAL AGENT | SECURITY AGREEMENT | 023649 | /0061 | |
| Sep 30 2010 | BANK OF AMERICA, N A | SPHERE SOURCE, INC | TERMINATION AND RELEASE OF SECURITY INTEREST IN PATENT RIGHTS | 025323 | /0416 | |
| Sep 30 2010 | BANK OF AMERICA, N A | Tacoda LLC | TERMINATION AND RELEASE OF SECURITY INTEREST IN PATENT RIGHTS | 025323 | /0416 | |
| Sep 30 2010 | BANK OF AMERICA, N A | TRUVEO, INC | TERMINATION AND RELEASE OF SECURITY INTEREST IN PATENT RIGHTS | 025323 | /0416 | |
| Sep 30 2010 | BANK OF AMERICA, N A | YEDDA, INC | TERMINATION AND RELEASE OF SECURITY INTEREST IN PATENT RIGHTS | 025323 | /0416 | |
| Sep 30 2010 | BANK OF AMERICA, N A | Quigo Technologies LLC | TERMINATION AND RELEASE OF SECURITY INTEREST IN PATENT RIGHTS | 025323 | /0416 | |
| Sep 30 2010 | BANK OF AMERICA, N A | Netscape Communications Corporation | TERMINATION AND RELEASE OF SECURITY INTEREST IN PATENT RIGHTS | 025323 | /0416 | |
| Sep 30 2010 | BANK OF AMERICA, N A | MAPQUEST, INC | TERMINATION AND RELEASE OF SECURITY INTEREST IN PATENT RIGHTS | 025323 | /0416 | |
| Sep 30 2010 | BANK OF AMERICA, N A | Lightningcast LLC | TERMINATION AND RELEASE OF SECURITY INTEREST IN PATENT RIGHTS | 025323 | /0416 | |
| Sep 30 2010 | BANK OF AMERICA, N A | GOING INC | TERMINATION AND RELEASE OF SECURITY INTEREST IN PATENT RIGHTS | 025323 | /0416 | |
| Sep 30 2010 | BANK OF AMERICA, N A | AOL ADVERTISING INC | TERMINATION AND RELEASE OF SECURITY INTEREST IN PATENT RIGHTS | 025323 | /0416 | |
| Sep 30 2010 | BANK OF AMERICA, N A | AOL Inc | TERMINATION AND RELEASE OF SECURITY INTEREST IN PATENT RIGHTS | 025323 | /0416 | |
| Mar 15 2012 | Netscape Communications Corporation | New Aurora Corporation | CHANGE OF NAME SEE DOCUMENT FOR DETAILS | 028450 | /0340 | |
| Sep 29 2014 | New Aurora Corporation | Facebook, Inc | ASSIGNMENT OF ASSIGNORS INTEREST SEE DOCUMENT FOR DETAILS | 033847 | /0441 | |
| Oct 28 2021 | Facebook, Inc | Meta Platforms, Inc | CHANGE OF NAME SEE DOCUMENT FOR DETAILS | 058961 | /0436 |
| Date | Maintenance Fee Events |
| Jan 12 2011 | ASPN: Payor Number Assigned. |
| Aug 28 2013 | M1551: Payment of Maintenance Fee, 4th Year, Large Entity. |
| Sep 07 2017 | M1552: Payment of Maintenance Fee, 8th Year, Large Entity. |
| Aug 25 2021 | M1553: Payment of Maintenance Fee, 12th Year, Large Entity. |
| Date | Maintenance Schedule |
| Mar 23 2013 | 4 years fee payment window open |
| Sep 23 2013 | 6 months grace period start (w surcharge) |
| Mar 23 2014 | patent expiry (for year 4) |
| Mar 23 2016 | 2 years to revive unintentionally abandoned end. (for year 4) |
| Mar 23 2017 | 8 years fee payment window open |
| Sep 23 2017 | 6 months grace period start (w surcharge) |
| Mar 23 2018 | patent expiry (for year 8) |
| Mar 23 2020 | 2 years to revive unintentionally abandoned end. (for year 8) |
| Mar 23 2021 | 12 years fee payment window open |
| Sep 23 2021 | 6 months grace period start (w surcharge) |
| Mar 23 2022 | patent expiry (for year 12) |
| Mar 23 2024 | 2 years to revive unintentionally abandoned end. (for year 12) |